Comment by pabs3
Developer tools really need to be more mindful of the fact that on developer machines, the current directory should not be trusted, and arbitrary code should not be executed from it. The git project has been learning this the hard way, and others should too.
For check-all-the-things (meta-linter), we disable the rubocop default config file using the "--config /dev/null" options.